Open-source secret management tool for storing, accessing and distributing dynamic secrets, encryption keys and tokens across applications.
Pricing: 0 USD · Updated 2026-09-03
securityHashiCorp Vault is free to use (price checked 2026-09-03).
HashiCorp Vault is a security — best for open-source secret management tool for storing, accessing and distributing dynamic secrets, encryption keys and tokens across applications.
Pricing was verified on 2026-09-03 from the official HashiCorp Vault website.
What actually happens when you see the padlock? Encryption, certificates and why every website should use HTTPS.
What a JSON Web Token is, how the header.payload.signature structure works, which claims and algorithms exist, and how to validate JWTs safely.
Step-by-step implementation of JWT authentication on a Node.js/Express API: password hashing, login endpoint, token verification middleware, refresh tokens, and the common security pitfalls.
Environment variables are the standard way to configure a Node.js app without hardcoding values. Node reads them through process.env, you can load them from .env files with the built-in --env-file flag or the dotenv package, and secrets should stay out of your code and version control. This guide walks through each approach and when to use it.
The Web Crypto API gives every browser a built-in cryptography engine. Learn how to hash data, sign and verify messages, and encrypt or decrypt content using SubtleCrypto — with practical code examples and security notes.
OAuth 2.0 is an open standard for delegated authorization defined in RFC 6749. It lets a user (the resource owner) grant a third-party application (the client) limited access to resources on another server without sharing their password. This guide explains the four roles, the main grant types, the recommended authorization-code flow with PKCE, and the security best practices from RFC 9700.
SQL injection is one of the most common web vulnerabilities — this guide explains how it works, the main attack types, and the secure coding practices that prevent it.
A Content Security Policy (CSP) is an HTTP security header that tells a browser which resources a page is allowed to load. Learn how CSP works, what directives are available, and how to deploy it without breaking your site.
